United States of America: Vetoed Vermont Act relating to enhancing consumer privacy (HB 121) including registration requirement for data brokers

On 13 June 2023, Governor Scott of Vermont vetoed the Act relating to enhancing consumer privacy (HB 121), citing significant risks and potential legal challenges. The Governor highlighted concerns over the Bill's “private right of action”, which could position Vermont as exceptionally hostile to businesses and non-profits. Additionally, the “Kids Code” provision, aimed at protecting children, was noted as potentially violating the First Amendment. The complexity of the Bill, alongside its expansive definitions and provisions, was also mentioned as a burden for small and mid-sized businesses, potentially placing them at a competitive disadvantage. Governor Scott suggested looking towards Connecticut’s data privacy law as a model for achieving consumer data privacy and child protection without the associated risks. The Bill would have required data brokers, defined as a business that sells or licenses personal information to third parties, to register with the Secretary of State. In the registration process, data brokers would have been required to provide information such as contact details, opt-out processes for consumers, and details on data collection practices. If data brokers had failed to register, they would have faced a daily fine of USD 125 and additional penalties if they had provided false information.